Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89f9e60d-cbc8-3d08-8b50-4d18e9e211f0.roa
File: 89f9e60d-cbc8-3d08-8b50-4d18e9e211f0.roa (raw, json)
Hash identifier: JSPZn3GdIWtB91Kj/+znmnaW9resTkZjo5n2YBSYubA=
Subject key identifier: E8:6C:1A:B1:03:4C:32:C3:85:71:71:8F:A6:35:B8:57:AF:F5:FF:10
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FDCDBCE38941747D7A5991BC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89f9e60d-cbc8-3d08-8b50-4d18e9e211f0.roa
Signing time: Wed 09 Nov 2022 12:00:00 +0000
ROA not before: Wed 09 Nov 2022 12:00:00 +0000
ROA not after: Thu 15 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 130.175.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:dc:db:ce:38:94:17:47:d7:a5:99:1b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 9 12:00:00 2022 GMT
Not After : Dec 15 05:00:00 2022 GMT
Subject: CN=7884a6ae-ee48-43cc-be91-6d073a4c5d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:46:64:d3:36:90:10:67:99:dc:44:37:2c:23:
b7:77:99:7f:8a:72:60:52:bb:a0:b1:a3:52:38:ea:
fb:2f:cb:ec:ce:00:88:4f:78:61:35:1d:75:12:96:
b3:1e:4f:6f:55:f1:65:59:11:f2:18:13:03:fa:eb:
d7:67:d1:38:06:af:51:0c:f4:2e:20:e2:73:7d:06:
e6:a0:7b:fd:0a:a3:4b:92:31:f7:9e:54:2a:93:be:
68:cb:38:f9:e3:2e:2d:01:fd:1f:ab:f3:54:49:98:
e6:f4:93:54:6c:b3:07:bf:2a:82:df:38:5d:e2:a5:
c1:d8:1a:8d:5d:96:11:a9:c1:d2:bc:5f:e7:f4:c7:
26:cc:1b:fa:43:2b:2e:da:08:41:b9:0d:98:b3:c0:
dd:36:dd:27:b0:10:7c:3d:90:94:34:57:8a:36:3e:
91:65:e8:2b:48:40:19:8c:0f:fb:57:01:26:c4:5a:
ab:48:3d:a2:7f:6b:5f:67:07:ac:2c:1f:84:dc:44:
52:da:be:e8:84:7b:62:32:09:72:73:a2:05:58:70:
8c:b6:cd:dd:6c:cf:ff:86:1b:f1:b2:2e:4c:33:46:
ec:70:83:ee:82:74:20:5f:3e:df:cc:bd:75:02:9e:
03:ea:c6:9d:c7:91:83:7b:31:17:ce:d9:bb:dc:d2:
6a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6C:1A:B1:03:4C:32:C3:85:71:71:8F:A6:35:B8:57:AF:F5:FF:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89f9e60d-cbc8-3d08-8b50-4d18e9e211f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
130.175.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:47:6d:02:dc:ee:95:b0:4d:5f:24:42:ba:b5:4a:be:1c:67:
ed:5f:d4:29:7e:c1:9e:bb:5c:ad:61:17:48:27:1b:5c:42:67:
c4:9d:d5:b1:8a:de:d7:72:aa:e1:d6:14:f7:9d:0f:cc:f8:94:
af:17:47:1a:ba:02:a1:a5:2e:8c:8c:53:46:84:29:27:95:da:
33:99:2c:fc:8a:ed:e1:e9:52:d6:d6:83:18:b6:ee:da:23:55:
05:a9:74:c6:1f:62:51:47:70:fd:24:d3:0e:11:73:2a:ce:1f:
8b:fb:90:11:a7:66:6d:3c:e4:8d:75:2c:cf:21:17:47:8a:1f:
1b:3d:9c:5c:84:26:6a:07:35:38:7b:56:27:d1:35:71:4f:31:
56:40:0c:49:c6:73:79:5b:e1:64:b7:d3:fa:3a:a9:7c:94:d6:
1c:fc:ca:89:4b:46:e8:9f:87:8c:bc:34:4e:ba:f1:30:32:a9:
bc:51:25:8c:d1:43:45:cd:f6:c4:99:2a:5a:b2:91:3a:00:4e:
d2:6f:8a:4f:2d:22:af:e1:dd:62:e7:dd:63:63:9e:28:1d:97:
08:3a:9c:3e:42:e2:72:20:ac:b1:29:25:fa:61:8b:9e:20:c2:
1a:00:3d:83:3d:97:51:ef:f4:b7:ed:99:57:8d:da:af:5b:a4:
a0:36:4c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:13 2025 by rpki-client